Token endpoint

The token endpoint validates the requested grant and authenticates the client when its configuration requires it. See Client authentication for Basic, POST and JWT methods.

Example: http://127.0.0.1:8080/oidc/tenant1/token-endpoint

Token endpoint errors

Error id	Description
invalid_request	The request is NOT valid. This is usually due to missing mandatory parameters or wrong parameter values.
invalid_client	Client authentication failed, including invalid credentials, JWT assertions or replayed assertions.
invalid_grant	The provided 'code' is NOT valid. Either it has timed out or has already been used.

Explore this section

Client authentication Configure allowed methods, JWT verification keys and replay protection.	Open Client authentication
Authorization code Configuration and usage guidance for Authorization code in Fortified ID Access.	Open Authorization code
Refresh token Configuration and usage guidance for Refresh token in Fortified ID Access.	Open Refresh token
Client credentials Used for machine-2-machine.	Open Client credentials

In this section

• Client authentication
• Authorization code
• Refresh token
• Client credentials